CVE-2024-26495

A Cross-Site Scripting (XSS) vulnerability exists in Friendica versions released after v.2023.12 . The root cause is the improper neutralization of input during web page generation, specifically within the BBCode tags used in the post content and post comments functions. A remote attacker can exp...